TYPO3 8.7.30
Release Notes
This version is not supported anymore.
The TYPO3 CMS community supported from 2017-04-04 until 2020-03-31. Extended security & compatibility support (ELTS) expired on 2024-03-31.
Please consider updating to a newer version.
Release Notes for TYPO3 CMS 8.7.30
This document contains information about TYPO3 CMS 8.7.30 which was released on 17.12.2019.
Get TYPO3 8.7.30 nowNews
This release is a combined bug fix and security release.
Find more details in the security bulletins:
- https://typo3.org/security/advisory/typo3-core-sa-2019-021/
- https://typo3.org/security/advisory/typo3-core-sa-2019-022/
- https://typo3.org/security/advisory/typo3-core-sa-2019-023/
- https://typo3.org/security/advisory/typo3-core-sa-2019-024/
- https://typo3.org/security/advisory/typo3-core-sa-2019-025/
- https://typo3.org/security/advisory/typo3-core-sa-2019-026/
- https://typo3.org/security/advisory/typo3-psa-2019-011/
Checksums of TYPO3 8.7.30
SHA256
8487257e884199fbc53a8f4e7b27b4bb37625a00b9c589e161634f0806fe716e typo3_src-8.7.30.tar.gz 75e11b3fadf21ef9f45ecfb6eac37e3bda6e53ae0e3f5b317a4c12f20016ddbc typo3_src-8.7.30.zip
SHA1
3df3a112dc7e2857bf39cfd2bc2c0bb7842a824c typo3_src-8.7.30.tar.gz 74b641a89f0b2032b44b988d6e6f8f39bd9d6d1d typo3_src-8.7.30.zip
MD5
cd75ea6e2e1bcc2ef6b977c551b7730f typo3_src-8.7.30.tar.gz 7c5fed9acc0ab0617d0e45081ea6a0e1 typo3_src-8.7.30.zip
Package Signatures
TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.
Download GPG signed release README.md file
Example of verifying integrity of tar.gz package of current release:
wget --content-disposition https://get.typo3.org/8.7.30/tar.gz wget --content-disposition https://get.typo3.org/8.7.30/tar.gz.sig gpg --verify typo3_src-8.7.30.tar.gz.sig typo3_src-8.7.30.tar.gz
Upgrading
The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.
Changes
Here is a list of what was fixed since 8.7.29:
- 2019-12-17 23b71bb105 [RELEASE] Release of TYPO3 8.7.30 (thanks to Oliver Hader)
- 2019-12-17 e31241cbe4 [SECURITY] Avoid insecure deserialization in QueryGenerator & QueryView (thanks to Frank Naegler)
- 2019-12-17 25750b4da1 [SECURITY] Prevent SQLi in ext:lowlevel QueryGenerator (thanks to Frank Naegler)
- 2019-12-17 037b6c274d [SECURITY] Avoid directory traversal on archive extraction (thanks to Andreas Fernandez)
- 2019-12-17 96b122b756 [SECURITY] XSS in file list through file extension (thanks to Andreas Fernandez)
- 2019-12-17 a35c42e9bc [SECURITY] Avoid XSS by correctly encoding typolink results (thanks to Oliver Hader)
- 2019-12-17 966a0038c1 [SECURITY] Prevent XSS in EXT:form error message output (thanks to Frank Naegler)
- 2019-12-17 57e4ed35a6 [SECURITY] Avoid possible insecure deserialization in Extbase (thanks to Oliver Hader)
- 2019-12-17 cff868c142 [TASK] Streamline frontend user password recovery process (thanks to Oliver Hader)
- 2019-12-16 cf94a93d3e [TASK] Provide PHP 7.4 test run configuration (thanks to Anja Leichsenring)
- 2019-12-16 e21404e85c [BUGFIX] Fix failing tests in 8.7 branch (thanks to Anja Leichsenring)
- 2019-12-16 77ca6dbe45 [TASK] Streamline test names (thanks to Oliver Hader)
- 2019-12-16 6753a7dda7 [TASK] Simplify chunking of test-plan jobs (thanks to Markus Klösges)
- 2019-12-15 40d64179cf [DOCS] Remove "Adding Your Own Content Elements" (thanks to Sybille Peters)
- 2019-12-14 004efbaab8 [BUGFIX] Add VendorName to Fluid Ajax WidgetContext (thanks to Stefan Froemken)
- 2019-12-14 d4c190b9e7 [TASK] Mix test jobs in stages (thanks to Anja Leichsenring)
- 2019-12-14 92ae88f453 [TASK] Restructure nightly plans in stages a 50 jobs (thanks to Anja Leichsenring)
- 2019-12-13 bb11a3e021 [BUGFIX] Mark guzzlehttp/guzzle >= 6.5.0 as conflict (thanks to Benni Mack)
- 2019-12-13 69d7ff8e05 [BUGFIX] Apply thumbscrews to sqlserver (thanks to Andreas Fernandez)
- 2019-12-12 1dbc8be77f [BUGFIX] Fix typo in cHash option description (thanks to Benni Mack)
- 2019-12-11 60b6f287a3 [BUGFIX] Fix indentation accordingly to CGL (thanks to Daniel Siepmann)
- 2019-12-10 05b3fe1a0a [TASK] Enable PHP 7.4 support for composer-based installations (thanks to Benni Mack)
- 2019-12-10 1e2bb9541f [TASK] Update friendsofphp/php-cs-fixer to 2.16.1 (thanks to Benni Mack)
- 2019-12-10 9915e7f04d [TASK] Update symfony components to LTS version for tarballs (thanks to Benni Mack)
- 2019-12-10 d187164653 [BUGFIX] Raise platform settings for tarball distributions (thanks to Benni Mack)
- 2019-12-06 4a5f0692f0 [TASK] Update fluidtypo3/fluid to 2.6.8 to add PHP 7.4 compatibility (thanks to Benni Mack)
- 2019-12-03 8deaa062eb [BUGFIX] Use correct container name for MsSQL server image (thanks to Anja Leichsenring)
- 2019-12-02 a7de0dba68 [TASK] Use mssql-2017-cu17 (thanks to Anja Leichsenring)
- 2019-11-29 70f516bb60 [TASK] Improve pre-merge test run configs (thanks to Anja Leichsenring)
- 2019-11-29 bfca2976f2 [TASK] Restructure nighly test plan spec (thanks to Anja Leichsenring)
- 2019-11-28 5a94bc14b6 [TASK] Future-proof Fluid template namespace imports (thanks to Georg Ringer)
- 2019-11-28 941a93d09b [DOCS] Use correct filename in documentation of fluid styled content (thanks to Georg Ringer)
- 2019-11-27 8860c6229e [BUGFIX] Hide edit link for records the user has no edit permissions for (thanks to Daniel Goerz)
- 2019-11-26 28abe14872 [BUGFIX] Use correct icon for menu separator if hidden in menu (thanks to Karsten Nowak)
- 2019-11-22 e2ea163c30 [TASK] Make PHP code of TYPO3 Core PHP 7.4 compliant (thanks to Benni Mack)
- 2019-11-13 f150b2d4f1 [TASK] Trigger nightly test builds with more time in between (thanks to Anja Leichsenring)
- 2019-11-09 40f7d52bb2 [BUGFIX] Ignore unique evaluation in l10n_mode exclude (thanks to Christoph Lehmann)
- 2019-11-09 8f8994e9cc [BUGFIX] Fix from usage of database restriction within lowlevel scripts (thanks to Timo Webler)
- 2019-11-08 c8a3f99821 [TASK] Extend TCA shadowColumns instead of overriding them (thanks to Oliver Hader)
- 2019-11-08 9bfad5f378 [BUGFIX] Don't escape decimal character group (thanks to Matthias Vogel)
- 2019-11-08 652e0f8e6c [BUGFIX] Remove references to "alternativeTempPath" (thanks to Benni Mack)
- 2019-11-07 5c716ee97e Revert "[TASK] Speed up DB query for tables with versions" (thanks to Oliver Hader)
- 2019-10-30 14b3abb8f3 [TASK] Set TYPO3 version to 8.7.30-dev (thanks to Benni Mack)